AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

1-8. (canceled) 

9. (original) A computer-implemented method for multi-level memory domain protection, 
comprising the steps of: 

creating a domain process context, having an operating system code executing 
within a first protection level, a domain code executing within a second 
protection level, and a user code residing within the second protection level; 

creating a user process context, having the operating system code executing within 

the first protection level, a non-executable reserved portion, and the user code 
executing within the second protection level; and 

protecting the domain code from the user code by locating the domain code in 
the non-executable reserved portion. 

10 - 14. (canceled) 
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15. (original) A system for multi-level memory domain protection, the system 
comprising: 

means for creating a domain process context, having an operating system code 
executing within a first protection level, a domain code executing within 
a second protechon level, and a user code residing within the second 
protection level; 

means for creating a user process context, having the operating system code 
executing within the first protection level, a non-executable reserved 
portion, and the user code executing within the second protection level; 
and 

means for protecting the domain code from the user code by locating the domain 
code in the non-executable reserved portion. 

16-18. (canceled) 
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19. (original) A computer-useable medium embodying computer-readable program 

code for causing a computer to perform multi-level memory domain protection 
by performing the steps of: 

creating a domain process context, having an operating system code executing 
within a first protection level, a domain code executing within a second 
protection level, and a user code residing within the second protection 
level; 

creating a user process context, having the operating system code executing 

within the first protection level, a non-executable reserved portion, and 
the user code executing within the second protection level; and 

protecting the domain code from the user code by locating the domain code in 
the non-executable reserved portion. 

20 - 27. (canceled) 
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28. (previously presented) A computer-implemented method for multi-level memory 

domain protection, comprising: 

establishing a user process context for a user code; 

establishing a domain process context for a domain code; and 

protecting the domain code, executing at a protection level, from the user code, 

executing at the protection level, by context switching between the user 

process context and the domain process context, 
wherein the user context process has a non-executable reserve portion in which 

the domain code is located. 

29. (previously presented) A system for multi-level memory domain protection 

comprising: 

a user process context for a user code; 

a domain process context for a domain code; and 

a protection that protects the domain code, executing at a protection level, from 
the user code, executing at the protection level, by context switching 
between the user process context and the domain process context, 

wherein the user context process has a non-executable reserve portion in which 
the domain code is located. 
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30. (previously presented) A computer-readable medium embodying computer- 
readable program code for causing a computer to perform multi-level memory 
domain protection by performing the process of; 
establishing a user process context for a user code; 
establishing a domain process context for a domain code; and 
protecting the domain code, executing at a protection level, from the user code, 
executing at the protection level, by context switching between the user 
process context and the domain process context, wherein the user context 
process has a non-executable reserve portion in which the domain code is 
located. 



31. (previously presented) A computer-implemented method for multi-level memory 
domain protection, comprising: 

protecting a domain code, executing at a protection level, from a user code, 

executing at the protection level, by context switching to establish two 
levels of protection within said protection level. 
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32. (previously presented) A computer-implemented method for multi-level memory 

domain protection, comprising: 

executing calling-code in a first process pair calling for execution of targeted 

code in a second process pair; and 
inter-group context switching from the first process pair to the second process 

pair, wherein the inter-group context switching establishes two levels of 

protection within said protection level. 

33. (previously presented) A system for multi-level memory domain protection 

comprising: 

a protection that protects a domain code, executing at a protection level, from a 
user code, executing at the protection level, formed by context switching 
to establish two levels of protection within said protection level. 



34. (previously presented) A computer-readable medium embodying computer- 
readable program code for causing a computer to perform multi-level memory 
domain protection by performing the process of: 

protecting a domain code executing at a protection level, from a user code, 

executing at the protection level, by context switching to establish two 
levels of protection within said protection level. 
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35. (previously presented) A system for multi-level memory domain protection 
comprising: 

a protection that protects a domain code, executing at a protection level, from a 
user code, executing at the protection level, formed by context switching 
to establish two levels of protection within said protection level. 
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